Now that a 32-bit jailbreak for iOS 9.3.5 is finally available a lot of legacy device owners will be looking to try it out on their devices, whether as an end of life plan, or to downgrade them to an unsigned firmware which runs more smoothly. In this guide, we’ll show you how to use the Phœnix jailbreak, as well as how to move correctly from the first version to any later ones.

For those jailbreaking with Version 2 or later, the How to jailbreak with Phœnix instructions below are all you need to follow; you do not need to follow the second set of instructions at the end of the article.

Users moving from Version 1 to Version 2 or later should follow the How to move from version 1 to later versions instructions at the bottom of the article first, and then return to the How to jailbreak with Phœnix instructions afterward.

How to jailbreak with Phœnix

1) Download Cydia Impactor to your computer.

2) Download Phœnix to your computer.

3) Launch Impactor and connect your device to your computer. Make sure your device is shown connected.

4) Drag the Phoenix.ipa onto Cydia Impactor.

5) Enter your Apple ID at the prompt.

6)a) If you don’t have two-step verification turned on for your Apple ID, enter your Apple ID password.

6)b) If you have two-step verification turned on, you must log in to the Apple ID website, create an app-specific password, and enter that into Impactor instead of your normal password.

7) When Impactor has installed the .ipa, check that the Phœnix app has appeared on your Home screen.

8) Open Settings on your device and navigate to General – Device Management.

9) Select the profile named after the Apple ID you entered into Impactor. Press the Trust button to trust the jailbreak app on your device.

10) Once you have trusted Phœnix, launch it from the Home Screen.

11) Press the Prepare for Jailbreak button, then Begin Installation, then Use Provided Offsets, and wait.

12) Your device should respring, and the Cydia app should have appeared on your Home screen. If it doesn’t launch, re-open the jailbreak app and press Kickstart Jailbreak to enable it. This may take several tries to work. You will know it has worked when the app reports Your device is jailbroken, and not Your device is prepared for jailbreak, but the jailbreak is not enabled.

13) In future, you will only have to go through the Kickstart Jailbreak screen, not the other installation screens. You will have to run the app once after every reboot. The app may take several tries to successfully jailbreak.

How to move from Phœnix version 1 to later versions

1) Make sure your device on Phœnix Version 1 is in a jailbroken state.

2) Open Cydia and install MTerminal.

3) Launch MTerminal and enter the following command at the prompt:

rm /usr/bin/sed && /usr/libexec/cydia/firmware.sh

Take your time and type carefully. Copy and paste if necessary. Hit Enter to issue the command.

4) Once that is done, return to the Home Screen and delete the Phœnix Version 1 app by holding it and then pressing the cross in the top corner of the icon.

5) Reboot your device.

6) Now return to the start of this article and follow the Instructions on How to jailbreak with Phœnix, making sure to use the newest version from the link provided, not the original version 1 download.

  • cdlenfert

    So can you jailbreak with this, downgrade to an older firmware (assuming you saved shsh blobs) and then apply an untethered jailbreak (assuming your downgrading to a firmware with an untethered jailbreak available)?

    • Abhinav Chaudhary

      That’s one option, other option is to use CoolBooter.

      • cdlenfert

        Does CoolBooter let you get to an untethered jailbreak? I didn’t think it was a true downgrade.

      • Abhinav Chaudhary

        No because if you turn off your device when you are into a downgraded firmware via CoolBooter then you return to your stock iOS when you turn the device back on.

      • Siva

        Can you able to signin to your gamecenter account in coolbooter iOS?

    • Chris Roach

      I think this jb will be updated to an untether within a week.

    • There’s talk of a untether anyway so you might get best of both worlds.

    • Joaquim Barbosa

      Yes, you can. Jailbreak with this, downgrade to a firmware of your choice (with future restore + blobs), then jailbreak untethered (if available for the firmware). Thanks for reading!

  • Martynet

    9.3.5, seriously?

    • Seriously what? There are thousands of iPhone 4s users out there and 9.3.5 is the latest signed version. Not everyone has money like most people to waste on new devices.

      • Jose Gonzalez

        Lol …….. Love your response Natalie!

      • rafa benitez

        yeah, he, doubt is a “she”, has some serious anger control issues lol

      • Ok, well, I’ve reported you for spam and harassment. Who the hell are you to even question my gender?

      • rafa benitez

        you better report even yourself you little cry baby lol

      • rafa benitez

        i reported you as well for bashing users here

      • rafa benitez

        so what?

      • rafa benitez

        i dont think your a girl, do you feel offended lol?
        if you feel offended by this i would recommend you to close your profile, stop commenting around the internet and have a nice, alone and isolated life>>

        dont come here to cry without any strong reason you.. “girl” lol

      • Martynet

        There are maybe thousands of iPhone 4s but also millions of iPhone 6 and 7 with iOS 10. Honestly I can remember only one friend with 4s and he wouldn’t care about jailbreak anyway. So, that’s why I wrote what I wrote. I think it’s a bit too late for 9.3.5

      • So Young

        Agreed. 4s released in 2011. Its a pretty old phone now. Even my best friend who dont have much money don’t have a 4s anymore. Usualy, people just take the 0$ phone with 2 years contract if they don’t want to spend money on newer device. in my friend’s case, she just have the SE.

      • Yeah, agreed. A lot of people update. But the fact of the matte is, people do still use it. A lot of people still use it. Just because you, or your friend doesn’t have something doesn’t give a good representation of the population does it. I don’t know anyone who uses an iPhone 4s anymore either. But there are a hell of a lot of screenshots posted on Reddit and Twitter of the old aspect ratio that states otherwise.

      • Again, yes, there are more 64-bit devices on iOS 10, but there are NO exploits for iOS 10 right now. Meanwhile, there are exploits for 9.3.5.

        Would you focus on an unjailbreakable iO,S or actually release a jailbreak to help the 32-bit devices that are stuck on 9.3.5 and can’t downgrade to a more usable iOS?

      • Martynet

        I would prefer ios 10 jailbreak 😉

      • rafa benitez

        seriously Natalie?
        you look so angry and full of personal problems.. lol

      • Angry? What? Why does every comment have to have anger included in it? Are you that little minded that you have nothing better to do?
        Arguing the comment and ignoring your BS, yes. Believe it or not but people do actually struggle to pay a phone bill, yet alone the included price of paying monthly for a modern device. The iPhone 4s is still in the top 20 mobile phones sold so I think it’s a safe bet that there at least a few thousand still being used. Same with older operating systems. Android has a lot of old systems in use, windows XP is still in use. Mac OS Snow Leopard is still in use.

      • rafa benitez

        Seriously what? Natali-boy? why you are so angry lol?
        SO WHAT?

    • Yes, 9.3.5. Because the were already exploits available for it. So why not? With this jailbreak, every single iOS 9 version (and 8, since Phoenix exploits are usable with 8.4.1) is jailbreakable, and 32-bit device owners are now jailbroken for life.

      Remember 6.1.3? How a jailbreak for it (p0sixspwn) was released during 7.1? A lot of people like you complained. And then when everyone started downgrading to iOS 6 they were thanking the p0sixspwm devs.

      So take a seat kid and shut up.

  • Martin De Jesús

    I am on Phoenix2 and installed mterminal, ran the command, but nothing was deleted because there is no such file or directory. I would like to install Phoenix3, how would I fix that error?

    • Joaquim Barbosa

      You don’t need the command on V2 or higher, it’s only for people moving from V1 to a later version. Thanks!

  • Rahimo

    I guess your ApplID is set with two-steps verifcation!

  • Rahimo

    What is the difference between the version 2 and version 3 ?? I used Phoenix2 on my iPad 3 and it’s stable and cool

    • Joaquim Barbosa

      V3 fixes the ‘custom offsets’ feature, which was previously broken. It won’t affect most users, who use the ‘provided offsets’ feature. Thanks.

      • Rahimo

        Thank you so much 🙂

  • Joaquim Barbosa

    The instructions show you what to do to get an app specific password. You need to follow those steps if you have 2-step authentication turned on for your Apple ID. Thanks.

  • Jose Gonzalez

    Thanks Phoenix!!!! You guys kick ass!!!!

  • JV

    I am sharing my user experience with ios 10.3.2 And ios 10.3.3 on iphone 6 plus!!!!!
    We all are apple lovers but why we spend so much on these devices because end of the day we got an unresponsive, freezy updates like ios 10xx!!! so called master version !!which makes our devices slow , unresponsive !!! M using iphone 6 plus on ios 10xx i face the same problem which I described still there is no solution for these lags ! I restored my device several times on ios 10.3.2 or ios 10.3.3 still my device not working properly even i typed this statement on android device!!!!!
    Even appe store didn’t have any solution
    If you guys any solution plz reply

    Thank you iDB for everything

    • …Uhh…what?

      • Trần Trái Dừa

        God damn those rich teenagers. They have so much technology in their hand and have no grammar in their brain.

  • yo que se

    I get the: rm: cannot remove /usr/bin/sed: Permission denied.
    Is ok or what?

    • Arjan Vlek

      sudo rm /usr/bin/sed?

      • yo que se

        “Command not found”

      • Rob Mincey

        su root, then enter “alpine” for password (unless you’ve already changed it.) Then, follow the instructions above.

      • yo que se

        It works! Thanks good Men!

  • edgycated

    cydia keeps crashing how do i fix?

    • Joaquim Barbosa

      You’re not jailbroken. Re-run Phoenix until it says inside the app: “You are jailbroken”.

  • Arjan Vlek

    “&&” allows you to run two commands after each other, providing the first command succeeds (has an exit code of 0, to be precise).

  • Chris Ryan

    so after 7 days does the app need to be reloaded?
    i don’t care at all about having to run the app after re-boot or battery drain, but reloading the app is annoying!

    • Joaquim Barbosa

      Yes, it does. But you could always downgrade to an untethered jailbreak such as iOS 9.0.2 if you have blobs. Failing that, hopefully a Cydia Extender alternative for iOS 9 will come along. Cheers!

  • This jailbreak is a pleasant surprise. Now 32-bit devices on 9.3.5 can finally downgrade to a more usable iOS, and will never have to worry about being unjailbroken again.

  • Joaquim Barbosa

    Which version of Phoenix are you using? The article clearly states that if you never used Version 1 then you do not need to follow those instructions… Only use that command is you used Phoenix Version 1 when it was released.

    • Dimash Shardarbek

      ive never installed phoenix before((
      is there another way of installing the JB?
      could you help me?